PHP - Dynamic function dispatch about graudit HOT 2 CLOSED

Your regex is both too strict and missing parts to be used for generic purposes. I did try a few variations, but when trying to be encompassing it resulted in too many false positives. Here are a few examples of text that either make matching difficult or cause false positives.

$_COOKIE['f'][0]("php://input");
echo "Debugging $test($return)";
$test[2]($ff);
$dynamic($$a);
/*
param string $thing (value|alternative) optional
*/

Detecting deliberate backdoors isn't really something graudit is intended for, but you should pick up the above with the following command:
graudit -d php/superglobal <path>

Or if you really want to look for dynamic invocation and don't mind the false positives the following command seems to find most of them...
echo "\\\$[\-_A-Za-z0-9]+(\[[\'\"]?[0-9A-Za-z]+[\'\"]?\])*[[:space:]]*\([^\)]+\)" | graudit -d - <path> but I find it too noisy to be a valuable rule.

from graudit.

Thanks for your input, I agree with the pattern (or idea behind it) to be too noisy for inclusion. I'll go ahead and close this one :)

from graudit.